SCMA will strive to ensure that the personal information it manages in the conduct of its business is protected.
To protect personal information, and assure individuals of this protection, this policy establishes procedures enabling SCMA to comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
This policy addresses the protection of personal information of current and former members (including volunteers), program participants, customers and other individuals whose personal information is collected.
SCMA collects and uses Personal Information (such as name, address, telephone number, academic transcripts and membership status) for the following purposes:
In addition to the above, SCMA also collects and uses a member’s Personal Information for the following purposes:
Except when otherwise permitted by law, we will only use a member’s Personal Information for the purposes identified to that member. When Personal Information is to be used for a purpose not identified, we will take all reasonable steps to ensure that the member is made aware of the new purpose.
This policy establishes procedures that reflect the principles in PIPEDA. In summary, the principles are:
Several provincial statutes have also been deemed substantially similar to PIPEDA. Under paragraph 26(2)(b) of PIPEDA, the Governor in Council can exempt an organization, a class of organizations, an activity or a class of activities from the application of PIPEDA with respect to the collection, use or disclosure of personal information that occurs within a province that has passed legislation deemed to be substantially similar to the PIPEDA. For more information, please visit the website for the Office of the Privacy Commissioner of Canada.
PIPEDA refers to the Personal Information Protection and Electronic Documents Act.
Designated contact refers to the Director of Corporate Services.
Personal information is “…any factual or subjective information, recorded or not, about an identifiable individual. This includes information in any form, such as:
“Personal information does not include the name, title, business address or telephone number of an employee of an organization” (Privacy Commissioner of Canada)
General: When staff requires further information about this procedure, they should speak to the designated contact.
Purposes and Consent: When personal information is to be collected, staff must, at or before the time of collection, identify to the individuals the reasons for collection, use, and disclosure of the personal information, and obtain their consent. This may be done by whatever means is suitable in the circumstances, and can be accomplished by a paper form, website, email, telephone, or other means. In all cases, a record should be kept of the consent received.
Retention Period: If, at the end of the indicated retention period, the personal information is the subject of an inquiry or complaint, or it has been recently used to make a decision about an individual, then the retention period should be extended by a reasonable amount of time.
Disclosure: Prior to disclosing personal information, staff will refer to the intended use of the information indicated in this procedure. Staff must ensure that any disclosure is in keeping with the intended use.
Third Parties: When personal information is to be received from, or provided to, a third party, staff will confirm by contract, letter, or other means, that the principles of the PIPEDA have been/will be followed.
New Purpose: When any SCMA process or initiative would require using or disclosing personal information for a new purpose not identified at the time of collection, staff will seek consent from the individuals involved. This may be done by whatever means is suitable in the circumstances, and can be accomplished by telephone, email, mail, or other means. In all cases, a record should be kept of the consent received. (Note: consent is not required if the new purpose is required by law)
Updates: Refer to the section “Personal Information – Inquiries and Complaints”.
When staff receives an inquiry1 or complaint about personal information, or SCMA’s compliance with PIPEDA, they shall direct the individual to the Personal Information Request Form2. The form is available for printing from SCMA’s website, or staff can mail it to the individual. They shall also inform the individual that they should return the completed form (by mail, other delivery, or fax) to SCMA, to the attention of the designated contact. There is no charge for an individual to access their personal information.
When the completed form arrives, the designated contact will, depending on the nature of the inquiry or complaint, investigate and respond, or delegate this task. In any case, the investigation and response should be completed in a reasonable period of time, and no more than the 30-day time limit specified in PIPEDA.
When the inquiry or complaint involves an amendment to personal information, the staff member responding will verify as required, prior to making the change. If SCMA does not agree to the requested amendment, then staff will attach a statement of disagreement to the record. When the amendment has been made, or the statement of disagreement attached, staff will then notify third parties, if applicable.
SCMA’s President and Chief Executive Officer is responsible for compliance with PIPEDA.
The designated contact for privacy matters is the Director of Corporate Services, who may be contacted at:
Supply Chain Management Association777 Bay Street, Suite 2701Toronto, OntarioM5G 2C8Telephone: 1-888-799-0877 ext. 3133
2 Requests for individual access to personal information must be in writing.
Subscribe to SCMA's enewsletters and receive information about the profession, association, and events directly in your inbox. You can manage your communication preferences, including unsubscribe, at any time.
Supply Chain Management Association
777 Bay Street, Suite 2701P.O. Box 112, Toronto ON M5G 2C8info@scma.com
Thank you for your interest in SCMA. We need to confirm your email address.
To complete the subscription process, please click the link in the email we just sent you.